multi auth using middleware